GRC Analyst (Attack Surface Mgmt) - Global Industrial

Under general supervision the Governance, Risk & Compliance (GRC) Analyst II will support Motion's Governance, Risk & Compliance functions, which may include Privacy, Compliance, Risk Management, Third-Party Risk, Governance, or Attack Surface Management. This role executes day-to-day GRC activities within their assigned domain, and reports to the GRC Lead.

Responsibilities

Monitors vulnerability scanning results and maintain visibility into Motion's external attack surface; Tracks and prioritizes vulnerabilities for remediation, partnering with IT Operations and Application Development; Owns vulnerability management reporting and metrics and scanning tool administration; Drives remediation service level agreements and escalate cross-team blockers as needed; Develops, maintains, and periodically reviews information security policies and standards; Owns the IT Security Awareness program, including content updates and tracking participation amongst stakeholders; Manages policy exceptions and the exception/acceptance process; Represents Governance in cross-team initiatives and audits; Supports compliance activities across pertinent platforms; Supports Operational Technology (OT) compliance efforts in partnership with the Cyber Defense Engineering & Architecture team; Manages privacy notices, cookie compliance, and consent/preference management across digital properties; Supports privacy program operations, including gap identification and remediation tracking; Assists with Privacy Impact Assessments (PIAs) and Data Privacy Impact Assessments (DPIAs); Manages intake and processing of Data Subject Access Requests (DSARs); Assist with compliance audits and assessments including evidence coordination; Produces privacy and compliance metrics and reporting data for the Lead, and support development of privacy training and awareness content; Maintains and update the cyber risk register and track security issues through the remediation lifecycle, following up with control owners on outstanding items; Supports execution of IT risk assessments and third-party/vendor risk assessments including periodic reviews and quality assurance of risk documentation; Tracks and communicate risk exceptions and remediation action plans to stakeholders; Collaborates with business partners and vendor stakeholders to identify improvement opportunities in risk processes; Maintains awareness of relevant risk frameworks and standards

Requirements

Typically requires a bachelor's degree in computer science, software engineering, or a related field and three (3) to five (5) years of related experience or equivalent combination; Strong analytical, organizational, and documentation skills; Excellent written and verbal communication skills; Ability to work independently in a lean team environment; Detail-oriented and self-directed; Relevant certification or progress toward certification; Familiarity with GRC tooling/platforms; Experience in a specific framework relevant to the functional area assigned

Benefits

healthcare coverage; 401(k); tuition reimbursement; vacation; sick; holiday pay